I'm trying to configure a Mikrotik metal access point for radius client authentication against a windows 2008 R2 server. The AP is talking to the radius server and I can see that the right certificate is being sent. I have two issues. 1) If I actually check the certificate validity, windows always s...

I never did write the Wiki, however, if I were to do this over again I would probably attempt to use this feature http://wiki.mikrotik.com/wiki/PCC This is supposed to fix the issue with multiple gateways. I would try this first, if you would like, I'd be happy to send you the config that I used. Cr...

Don't open up all ports to any address; just open up all ports to the address of your linux box, do your port scan and than go back to your normal settings. Just be careful, if you setup the dst-nat to forward all ports to an internal pc, you won't be able to log in to the rb133 any longer. Make sur...

Which version of 3.x are you running? Maybe 3.11 wasn't stable for that card, maybe an earlier revision might work for me.

Thanks,

Craig

No, the synchronous package was definitely loaded. Do you have a multi-core processor in the same box? Before I downgraded, I tried disabling the multi-core processor and running in single processor mode. Whenever I enabled the t1 card it would de-stabilize the router and I would have to reboot. I w...

Hi- I've got a SBE t1 card deployed in a powerouter and it is working great; very stable, good throughput, etc. I had to downgrade the routeros to 2.9.51 to get the T1 card working, though. So, I lost the benefit of the dual-core processor. So, I was wondering if anyone is aware of a T1 card that is...

In case anyone else hits this problem. This is the solution that I came up with. Now that it is done and working, it makes a whole lot of sense and is fairly simple. Basically, I wrote mangle rules that mark packets from the nets that I didn't want to be routed differently with the marker "no-c...

I've got a router deployed and I'm using mangle rules to mark traffic from the various attached subnets and then I'm using policy rules to route the traffic out 1 of 2 WAN connections. This is working as I'd like and I'm happy with that. I had to add policy based routes so that the subnets could tal...

I've been playing with the logging on a routeros based router/firewall and I can't seem to get any of the rejects to log. I'd like to log any reject messages to an external syslog server for analysis for a specific client. Anyway to do this? I've turned on firewall, system, error, critical as well a...

I'm setting up a pptp vpn for a client who will have remote operators logging in via the tunnel to access the local phone switch via softphones. The problem that I am having is that because I have to set a remote and a local IP address the phone switch is seeing the traffic as coming from that inste...

Yes, that did the trick. I was under the mistaken impression that it was impossible to bridge the wlan ports to ethernet ports in routeros. After re-reading the docs again, I caught the fine print and re-implemented without EoIP and everything works great. Appreciate the replies.

thanks

I have not tried to connect directly into the ethernet port because the hotspot is running on the bridge interface not the ethernet port. Using the EoIP subnet and setting up a Masquerade rule I can get out over the ethernet port. The reason for the EoIP tunnels is because I cannot bridge the wlan p...

I'm trying to deploy a wireless system in a large hotel and I'd like to make it as seamless as possible for users to roam from AP to AP. So, I designed the system to be controlled from one central router (RB532 running 2.9.31) and setup the hotspot on that router on the bridge interface. Since all o...

Spiretz if you are still reading this thread, we did get this working with the latest version of MT (currently using 2.9.24 on the AP side). So far it has been stable.

radius definitely works with hotspot. I've had it working with freeradius with a mysql back-end from a hotspot. I currently am not using it anymore for completely unrelated reasons but it definetly worked, was stable, and was easy to setup on the MT side. All I can say is make sure that the NAS setu...

I'm trying to keep a centralized setup as I upgrade my network from a mixture of trango and smartbridges to all mikrotik based setup. I know that I can use wds to bridge interfaces but can I use the same thing to bridge wired interfaces? My current setup |backhaul router MT|======>trango AP---------...

I should add that for the purposes of testing currently, I have no wireless security enabled on the mt access points, so the WEP setting error message on the smartbridges clients is misleading.

Thanks

I am in the process of converting all of my old smartbridges Access points over to MT based access points using Super range radios. All is well, getting great throughput on the access points and mt clients. However, I have a lot of smartbridges clients deployed and it seems that they will only assoc...

Interesting. Is this a bug? As far as I can tell there is no way to create a security profile while in station mode from winbox. From the command line, using the tab tip in the previous post I was able to set the authentication type (which corresponds to the mode set in winbox) and then set the mode...

I must be missing something but I am having all kinds of problems creating a security profile on a client unit so I can take advantage of WPA-psk. I'm using routeros 2.9.11 with an Atheros 5213 based 2.4 card. I'm able to create the security profile on my AP no problem but when I go to create it on ...

I am having similar problems with only certain clients. Some clients are fine and have connection times in excess of 200 hours, others are fine if they are not moving any traffic but as soon as they do anything other than opening a web page, their connection drops and they reconnect. In many cases t...